Skip to content

README.md

Latest commit

 

History

History
59 lines (46 loc) · 3 KB

README.md

File metadata and controls

59 lines (46 loc) · 3 KB
Raw
Jannik Reinhard — AI, Cloud and Endpoint Management

Custom Compliance Scripts

PowerShell scripts for Microsoft Intune Custom Compliance policies and device configuration checks.

Website GitHub LinkedIn X YouTube

Open-Source Collection · PowerShell · Practical by design

Overview

This repository contains Microsoft Intune custom compliance discovery scripts and their matching JSON definitions. Each folder covers one practical Windows compliance check.

Available Checks

Check Purpose
Check-AvEnabled Confirm that antivirus protection is enabled
Check-FirewallEnabled Confirm that Windows Firewall is enabled
Check-FreeStorage Check available storage
Check-IfAppIsInstalled Detect whether a required application is installed
Check-IfDeviceIsEncrypted Check device encryption
Check-IfDeviceIsUpToDate Check the Windows update state
Check-IfUnathorizedLocalAdmins Detect unexpected local administrators

Quickstart

  1. Open the folder for the check you want to use.
  2. Review and test the PowerShell discovery script on a test device.
  3. In the Microsoft Intune admin center, create a custom compliance policy.
  4. Upload the .ps1 discovery script and import the matching .json definition.
  5. Assign the policy to a test group before a wider rollout.

Note: Always review the expected values in the JSON file. Adjust them to match your own compliance requirements.

License

This project is available under the terms in LICENSE.

Built and maintained by Jannik Reinhard · Microsoft MVP for Security and AI Platform.

Support the open-source work

Stay healthy, Cheers Jannik